{"action":"Upgrade datasette-graphql to 1.2 or later.","affected":[{"fixed":"1.2","introduced":"0"}],"component":"datasette-graphql","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.2"],"ghsa_id":"GHSA-74hv-qjjq-h7g5","id":"tcs_01M5KF4SZH21TNR786DXZ8XEYR","modified_at":"2024-12-02T05:43:35.091839Z","published_at":"2020-11-24T22:59:08Z","references":["https://osv.dev/vulnerability/GHSA-74hv-qjjq-h7g5","https://github.com/simonw/datasette-graphql/security/advisories/GHSA-74hv-qjjq-h7g5","https://pypi.org/project/datasette-graphql"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-74hv-qjjq-h7g5","url":"https://osv.dev/vulnerability/GHSA-74hv-qjjq-h7g5"}],"summary":"datasette-graphql leaks details of the schema of private database files"}